Creating an Application for Jamf School

Jamf School Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. Log in to your Microsoft Entra ID Administrator account by navigating to the following webpage: https://portal.azure.com/.
  2. Navigate to Azure Active Directory > App registrations.
  3. Click New registration to add an application for Jamf School.
  4. Enter "Jamf School" in the Name field, and then configure additional settings as needed.
  5. Click Register.
  6. Click Authentication in the sidebar.
  7. Click + Add a platform.
  8. Click Web.
  9. Do one or more of the following:

    • (Automated Device Enrollment only) Enter the full URL for your Jamf School server, followed by "/onboarding/oauth" in the Redirect URIs field. For example: "https://schoolname.jamfcloud.com/onboarding/oauth"

    • (On-device enrollment only) Enter the full URL for your Jamf School server, followed by "/enroll/oauth" in the Redirect URIs field. For example: "https://schoolname.jamfcloud.com/enroll/oauth"

    • (Web clip only) Enter the full URL for your Jamf School server, followed by "/link.html" in the Redirect URIs field. For example: "https://schoolname.jamfcloud.com/link.html"

    Note:

    You can also find your redirect URIs by navigating to Organization > Settings > Authentication in Jamf School.

  10. Configure additional settings as needed.
  11. Click Configure.
  12. Navigate to Overview in the sidebar.
  13. Copy the Application ID.
  14. Navigate to Certificates & secrets in the sidebar.
  15. Click + New client secret and configure the settings as needed.
  16. Click Add. The client secret is displayed after the settings are saved.
  17. Copy the Value of the client secret and paste it to a secure location.
    Note:

    You must copy the value of the client secret before leaving this page because the key will no longer be visible once you leave the page.

  18. Click Overview in the sidebar.
  19. Click the Endpoints tab.
  20. Copy the following endpoints:

    • OAuth 2.0 token endpoint (v1)

    • OAuth 2.0 authorization endpoint (v1)

  21. Click API permissions in the sidebar.
  22. Click + Add a permission.
  23. Click Microsoft Graph.
  24. Click Delegated permissions.
    Note:

    An application cannot be created if this field is not selected. Once selected, the field will display Grant admin consent for organization name.

  25. Enter User.Read in the Select permissions
  26. Select the User.Read checkbox and click Add permissions.